Java Security topic is huge
One thing I have been studying for work is Java security, in particular, I have been looking at “Acegi Security”:http://www.acegisecurity.org/, “JAAS”:http://java.sun.com/products/jaas/, and “JGuard”:http://jguard.net/. So far, the main thing that I have found out is that this topic is huge. I have also found out that there is very little information out there about which one is best, however, I do realize that the word “best” is rather ambiguous, but it is the best word that I can think of at the moment.
Currently I think Acegi Security is the winner. I will post more info as I collect it. It would be nice to find a scholarly paper somewhere that showed a comprehensive study comparing the advantages and disadvantages of each framework in different situations, but I have a feeling that that is asking too much 
